Controller review required: This English editorial draft describes the current website features. The controller must confirm its legal bases, service providers, transfers, retention periods and application channels before approving the notice. It is not a certification of compliance.
Personal Data Protection Notice
This notice concerns the website operated by Av. Erol Yalçındağ under Turkish Personal Data Protection Law No. 6698 (KVKK).
1. Data controller
The office operates at Konak Mah. 1. Badem Sk. No:26 B Blok Kat:7 D:87 Lotus İş Merkezi, Nilüfer/BURSA, Türkiye. Contact details are provided on the Contact page.
2. Data and purposes
Names, telephone numbers, email addresses and message contents submitted through the site are used to handle enquiries, plan appointments and, where appropriate, provide legal services. Security and access records may include IP addresses, request paths, timestamps, device/browser classifications and authenticated account details. These records are not inherently anonymous. Client-portal documents and account details are processed to provide authorised document access.
3. Legal bases
The controller must determine and document the legal basis applicable to each purpose, including any relevant conditions under Article 5 of the KVKK concerning contracts, legal obligations or legitimate interests, and any requirements applicable to special-category data. A form checkbox is not a substitute for that assessment.
4. Recipients and service providers
Hosting, configured email delivery and other enabled services may involve service providers. The guided question-and-answer assistant does not send its choices to an AI provider. If the separate free-text AI mode is enabled, messages may be sent to the configured external provider after the displayed acknowledgement. Do not submit confidential case material through that mode. The controller must verify recipients, hosting locations and any international-transfer arrangements. Professional confidentiality obligations continue to apply.
5. Retention
Retention periods and erasure, destruction or anonymisation procedures must be defined by the controller in light of the purposes, applicable duties and preservation requirements. The office workflow module records review dates and legal holds; it does not automatically erase underlying records or documents. Security logs have a separate administrator-controlled retention function.
6. Rights and applications
Subject to Article 11 and the applicable application procedure, you may request information about processing, recipients, correction or erasure, and exercise other statutory rights. Contact the office using the published postal or email details for information on submitting a request and verifying identity. The controller must confirm the appropriate application channels and response process.